CVS commit: pkgsrc/x11/modular-xorg-server

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Wed Jul  8 07:37:42 UTC 2026

Modified Files:
        pkgsrc/x11/modular-xorg-server: Makefile.common distinfo

Log Message:
modular-xorg-server: update to 21.1.24.

This release contains the fixes for the issues reported in today's
security advisory:
https://lists.x.org/archives/xorg-announce/2026-July/003716.html

  -  CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow
  -  CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent()

As noted in the security advisory, CVE-2026-56000 seems to depend on a
commit not previously in a 21.1.x release (but is present in this
release). As far as we can tell, 21.1.23 and earlier are not vulnerable
to CVE-2026-56000.

On top of those we have few cleanup fixes backported to the 21.1 releases.


To generate a diff of this commit:
cvs rdiff -u -r1.68 -r1.69 pkgsrc/x11/modular-xorg-server/Makefile.common
cvs rdiff -u -r1.135 -r1.136 pkgsrc/x11/modular-xorg-server/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/x11/modular-xorg-server/Makefile.common
diff -u pkgsrc/x11/modular-xorg-server/Makefile.common:1.68 pkgsrc/x11/modular-xorg-server/Makefile.common:1.69
--- pkgsrc/x11/modular-xorg-server/Makefile.common:1.68 Wed Jun  3 13:11:56 2026
+++ pkgsrc/x11/modular-xorg-server/Makefile.common      Wed Jul  8 07:37:42 2026
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile.common,v 1.68 2026/06/03 13:11:56 wiz Exp $
+# $NetBSD: Makefile.common,v 1.69 2026/07/08 07:37:42 wiz Exp $
 # used by x11/modular-xorg-server/Makefile
 # used by x11/modular-xorg-xephyr/Makefile
 
-XORG_VERSION=  21.1.23
+XORG_VERSION=  21.1.24
 CATEGORIES=    x11
 MASTER_SITES=  ${MASTER_SITE_XORG:=xserver/}
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/x11/modular-xorg-server/distinfo
diff -u pkgsrc/x11/modular-xorg-server/distinfo:1.135 pkgsrc/x11/modular-xorg-server/distinfo:1.136
--- pkgsrc/x11/modular-xorg-server/distinfo:1.135       Wed Jun  3 13:11:56 2026
+++ pkgsrc/x11/modular-xorg-server/distinfo     Wed Jul  8 07:37:42 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.135 2026/06/03 13:11:56 wiz Exp $
+$NetBSD: distinfo,v 1.136 2026/07/08 07:37:42 wiz Exp $
 
-BLAKE2s (xorg-server-21.1.23.tar.xz) = 1e4f0010eccc686ca91f6d61dd24d891b49795079f04bd4f44fe75d87d093445
-SHA512 (xorg-server-21.1.23.tar.xz) = 7eae854af1b5db1f5d1e59cb9d26b86d98fa176d4f80f70935c707f17982d0446a0a8ad8d29c922edbd208435f995b027604fbb72e62a7bf3ba79f2f570aa0bb
-Size (xorg-server-21.1.23.tar.xz) = 5069780 bytes
+BLAKE2s (xorg-server-21.1.24.tar.xz) = fa220976ff606874059d9516c6d0ed5d83ef465cf8344637d57b7698ba0a40ff
+SHA512 (xorg-server-21.1.24.tar.xz) = f51372b04fe21632fc778ff240705161ed2dccc0114dbe3ee25156d8ac85ec945e2ac05d8638bc7d8d54bad4dfc89cb26b6bd2058b7804d54ab7179e1ac2eb13
+Size (xorg-server-21.1.24.tar.xz) = 5072780 bytes
 SHA1 (patch-configure) = 5dc88dbac3fc35822f83d336ee5ab7af4e84251f
 SHA1 (patch-hw_kdrive_ephyr_hostx.c) = b681ee28bc7af06774f10bc882d355d42ac965d3
 SHA1 (patch-hw_xfree86_common_xf86AutoConfig.c) = 70adf85be9fc6222a335686e7e9e9f385aca02f9